From 7c16556c8c556a57979ea7b54f977b9336d85151 Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:04 +0000 Subject: [PATCH 01/13] Update flake8 from 3.8.4 to 3.9.0 --- requirements_for_test.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements_for_test.txt b/requirements_for_test.txt index c4bf41fcb..543dd044f 100644 --- a/requirements_for_test.txt +++ b/requirements_for_test.txt @@ -6,7 +6,7 @@ pytest-mock==3.5.1 pytest-xdist==2.2.1 beautifulsoup4==4.9.3 freezegun==1.1.0 -flake8==3.8.4 +flake8==3.9.0 flake8-bugbear==21.3.1 flake8-print==4.0.0 requests-mock==1.8.0 From b9d2657de62dbd74a44321efebecc43905b7dbf6 Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:04 +0000 Subject: [PATCH 02/13] Update flake8-bugbear from 21.3.1 to 21.3.2 --- requirements_for_test.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements_for_test.txt b/requirements_for_test.txt index 543dd044f..bc83f35de 100644 --- a/requirements_for_test.txt +++ b/requirements_for_test.txt @@ -7,7 +7,7 @@ pytest-xdist==2.2.1 beautifulsoup4==4.9.3 freezegun==1.1.0 flake8==3.9.0 -flake8-bugbear==21.3.1 +flake8-bugbear==21.3.2 flake8-print==4.0.0 requests-mock==1.8.0 # used for creating manifest file locally From 7e75b8e6c93d2b3815167e3ad08501bc35c4aeca Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:05 +0000 Subject: [PATCH 03/13] Update awscli from 1.19.22 to 1.19.27 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 92fe0a526..c69541631 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,7 +8,7 @@ ago==0.0.93 # via -r requirements.in awscli-cwlogs==1.4.6 # via -r requirements.in -awscli==1.19.22 +awscli==1.19.27 # via # awscli-cwlogs # notifications-utils From dc93148907dae9659156d55b81bff57e2beb1ac1 Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:05 +0000 Subject: [PATCH 04/13] Update boto3 from 1.17.22 to 1.17.27 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index c69541631..b0e76fadd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,7 +18,7 @@ blinker==1.4 # via # -r requirements.in # gds-metrics -boto3==1.17.22 +boto3==1.17.27 # via notifications-utils botocore==1.20.22 # via From 737be3028b21c1e85994de600c9b02dc7b3472ab Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:06 +0000 Subject: [PATCH 05/13] Update botocore from 1.20.22 to 1.20.27 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index b0e76fadd..8a8feaf61 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20,7 +20,7 @@ blinker==1.4 # gds-metrics boto3==1.17.27 # via notifications-utils -botocore==1.20.22 +botocore==1.20.27 # via # awscli # boto3 From aa246eb3678580329293f74e9c9d284bad3b56f2 Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:06 +0000 Subject: [PATCH 06/13] Update colorama from 0.4.3 to 0.4.4 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 8a8feaf61..4d304c929 100644 --- a/requirements.txt +++ b/requirements.txt @@ -33,7 +33,7 @@ chardet==4.0.0 # via requests click==7.1.2 # via flask -colorama==0.4.3 +colorama==0.4.4 # via awscli dnspython==1.16.0 # via eventlet From ea5f4bd138fb13601d49ec87fcfdb107710a7ada Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:06 +0000 Subject: [PATCH 07/13] Update dnspython from 1.16.0 to 2.1.0 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 4d304c929..c0a235172 100644 --- a/requirements.txt +++ b/requirements.txt @@ -35,7 +35,7 @@ click==7.1.2 # via flask colorama==0.4.4 # via awscli -dnspython==1.16.0 +dnspython==2.1.0 # via eventlet docopt==0.6.2 # via notifications-python-client From 8d2b5ae1426fdb67453d3ab886cc6df90dc82a69 Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:07 +0000 Subject: [PATCH 08/13] Update docutils from 0.15.2 to 0.16 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index c0a235172..1440bdae4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -39,7 +39,7 @@ dnspython==2.1.0 # via eventlet docopt==0.6.2 # via notifications-python-client -docutils==0.15.2 +docutils==0.16 # via awscli et-xmlfile==1.0.1 # via openpyxl From 7393263dc0d507285deb3c3bc1fd436817f294dd Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:07 +0000 Subject: [PATCH 09/13] Update idna from 2.10 to 3.1 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 1440bdae4..3937ab475 100644 --- a/requirements.txt +++ b/requirements.txt @@ -75,7 +75,7 @@ gunicorn==20.0.4 # via -r requirements.in humanize==3.2.0 # via -r requirements.in -idna==2.10 +idna==3.1 # via requests itsdangerous==1.1.0 # via From f0552c7b47cc676d751976fee0a871c9fb18975b Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:08 +0000 Subject: [PATCH 10/13] Update openpyxl from 3.0.6 to 3.0.7 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 3937ab475..bb852fda3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -112,7 +112,7 @@ notifications-python-client==6.0.2 # via -r requirements.in git+https://github.com/alphagov/notifications-utils.git@43.8.3#egg=notifications-utils==43.8.3 # via -r requirements.in -openpyxl==3.0.6 +openpyxl==3.0.7 # via pyexcel-xlsx orderedset==2.0.3 # via notifications-utils From 375b45d5ea3d9445ab5fb47707e793c6f52d90c1 Mon Sep 17 00:00:00 2001 From: pyup-bot Date: Mon, 15 Mar 2021 13:55:08 +0000 Subject: [PATCH 11/13] Update xlrd from 1.2.0 to 2.0.1 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index bb852fda3..b1269d0a1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -204,7 +204,7 @@ werkzeug==1.0.1 # via flask wtforms==2.3.3 # via flask-wtf -xlrd==1.2.0 +xlrd==2.0.1 # via pyexcel-xls xlwt==1.3.0 # via pyexcel-xls From d426fcac744a0457dfda83c3d3186f3eaea172a7 Mon Sep 17 00:00:00 2001 From: Chris Hill-Scott Date: Mon, 22 Mar 2021 10:21:33 +0000 Subject: [PATCH 12/13] Freeze requirements --- requirements.txt | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/requirements.txt b/requirements.txt index b1269d0a1..0dde80ede 100644 --- a/requirements.txt +++ b/requirements.txt @@ -33,13 +33,13 @@ chardet==4.0.0 # via requests click==7.1.2 # via flask -colorama==0.4.4 +colorama==0.4.3 # via awscli -dnspython==2.1.0 +dnspython==1.16.0 # via eventlet docopt==0.6.2 # via notifications-python-client -docutils==0.16 +docutils==0.15.2 # via awscli et-xmlfile==1.0.1 # via openpyxl @@ -75,7 +75,7 @@ gunicorn==20.0.4 # via -r requirements.in humanize==3.2.0 # via -r requirements.in -idna==3.1 +idna==2.10 # via requests itsdangerous==1.1.0 # via @@ -83,8 +83,6 @@ itsdangerous==1.1.0 # flask # flask-wtf # notifications-utils -jdcal==1.4.1 - # via openpyxl jinja2==2.11.3 # via # flask @@ -204,7 +202,7 @@ werkzeug==1.0.1 # via flask wtforms==2.3.3 # via flask-wtf -xlrd==2.0.1 +xlrd==1.2.0 # via pyexcel-xls xlwt==1.3.0 # via pyexcel-xls From 1699f1f0b1e29806831566957522ddcbe45e60ad Mon Sep 17 00:00:00 2001 From: Chris Hill-Scott Date: Mon, 22 Mar 2021 10:43:01 +0000 Subject: [PATCH 13/13] Manually upgrade packages with vulnerabilities --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 0dde80ede..ecbf2569f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -96,7 +96,7 @@ lml==0.1.0 # via # pyexcel # pyexcel-io -lxml==4.6.2 +lxml==4.6.3 # via # pyexcel-ezodf # pyexcel-ods3 @@ -192,7 +192,7 @@ statsd==3.3.0 # via notifications-utils texttable==1.6.3 # via pyexcel -urllib3==1.26.3 +urllib3==1.26.4 # via # botocore # requests